$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: qRKBNhn5TGQBO2xWpT9e+1mCtyO/IwlJOb2lAG1vNNk= Subject key identifier: 67:15:D9:21:14:48:39:99:06:FF:36:16:26:58:51:39:65:19:56:29 Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0B9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0B93 Signing time: Sun 02 Jun 2024 19:35:45 +0000 Manifest this update: Sun 02 Jun 2024 19:35:45 +0000 Manifest next update: Sun 09 Jun 2024 19:35:45 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: RT9O36OKwncI/Eak/nfZ4U3aBRhnFo43+kOMdmOQl+M=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: ZOGumPt0pB9AbK2uRuPCw40qDj5EBhWflSGcy7nElfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 19:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Jun 2 19:35:45 2024 GMT Not After : Jun 9 19:35:45 2024 GMT Subject: CN=665cc991-2a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:14:30:c2:12:34:4e:95:f7:8c:74:36:ee: 88:13:52:73:45:03:68:2a:d5:09:2c:19:49:29:d8: e3:74:54:56:08:95:59:9a:b3:c8:0d:ae:90:44:2e: b3:cf:57:7a:ad:93:8d:27:75:f2:3c:73:ac:b5:2c: 36:2d:40:39:85:a2:cb:b5:ab:8b:93:78:58:9a:19: 84:98:35:a1:3a:ef:0a:f5:a7:4a:e2:83:92:3a:8f: ab:b1:fe:18:08:1c:0b:bc:53:ee:56:4b:36:6c:52: 62:ed:c1:66:21:b8:7f:76:0b:8e:f0:23:ac:5f:22: 84:18:e6:7f:39:de:fc:9a:e6:7b:b9:14:3e:c7:69: b6:80:6e:51:a8:be:46:01:4f:d0:8f:c3:94:3d:11: d1:b3:f6:93:16:f0:79:2c:f6:bc:7b:55:4d:c9:54: d6:80:f5:14:21:e9:b0:86:4f:4f:e5:53:3b:1d:06: 9d:ea:6a:7c:12:95:da:05:93:9b:cb:a9:ea:0d:b4: 72:bd:ca:25:8a:9f:3d:25:f6:2e:f6:01:d6:9b:db: 8d:e9:a8:fe:20:57:ce:68:d2:4b:40:4c:37:d7:c5: 15:a9:8b:6a:5b:12:ca:20:00:7c:5e:8c:c5:b4:1b: 85:96:65:a1:c8:16:ac:b7:f5:5f:9a:7f:1c:16:33: 5d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:15:D9:21:14:48:39:99:06:FF:36:16:26:58:51:39:65:19:56:29 X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:46:40:5a:1e:47:3c:06:17:be:b4:84:24:66:da:e3:75:3b: bf:9a:22:b0:cc:59:8b:40:d2:b5:47:59:c8:26:1c:c4:ac:0b: 06:a3:fe:cb:b7:12:2d:11:d9:ef:29:f3:06:e3:34:44:26:e9: f9:f4:80:1d:d8:09:f3:04:eb:d0:b3:35:24:17:00:ed:ce:e0: d8:50:30:56:b1:a4:a1:97:b5:d1:29:94:74:a7:a0:26:55:57: 01:2f:db:e5:5a:dd:3f:5c:eb:4e:98:98:3e:1b:d4:19:5d:88: 68:48:a5:3b:e4:5c:7b:19:c5:f0:35:7b:8d:80:e3:ba:6b:3a: c9:70:53:7c:02:51:c5:ed:13:bd:23:e1:ba:d5:ad:7f:6e:5e: de:e7:2f:86:4a:5a:98:1a:cb:d7:92:dc:00:7b:f3:84:23:33: d7:69:55:e1:6c:1a:44:c0:66:5b:8e:1f:37:8b:2c:60:d7:7f: d8:b6:3a:30:f2:a8:3f:26:5d:b3:2f:ab:e2:d1:2b:7a:44:1f: 7d:0c:80:01:56:9b:39:41:75:d3:c8:ce:dd:39:45:25:d5:22: 57:5d:5e:84:dd:58:9b:64:2e:e9:74:31:b1:23:b4:17:19:36: d6:d0:79:f5:56:ec:ed:db:2c:3f:5d:35:cc:fc:83:7e:fa:43: 01:12:13:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjQwNjAyMTkzNTQ1WhcNMjQwNjA5MTkzNTQ1WjAYMRYwFAYD VQQDEw02NjVjYzk5MS0yYTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+UUMMISNE6V94x0Nu6IE1JzRQNoKtUJLBlJKdjjdFRWCJVZmrPIDa6QRC6z z1d6rZONJ3XyPHOstSw2LUA5haLLtauLk3hYmhmEmDWhOu8K9adK4oOSOo+rsf4Y CBwLvFPuVks2bFJi7cFmIbh/dguO8COsXyKEGOZ/Od78muZ7uRQ+x2m2gG5RqL5G AU/Qj8OUPRHRs/aTFvB5LPa8e1VNyVTWgPUUIemwhk9P5VM7HQad6mp8EpXaBZOb y6nqDbRyvcolip89JfYu9gHWm9uN6aj+IFfOaNJLQEw318UVqYtqWxLKIAB8XozF tBuFlmWhyBast/Vfmn8cFjNdBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcV2SEU SDmZBv82FiZYUTllGVYpMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqRkBaHkc8Bhe+tIQkZtrjdTu/miKwzFmLQNK1R1nIJhzErAsGo/7L txItEdnvKfMG4zREJun59IAd2AnzBOvQszUkFwDtzuDYUDBWsaShl7XRKZR0p6Am VVcBL9vlWt0/XOtOmJg+G9QZXYhoSKU75Fx7GcXwNXuNgOO6azrJcFN8AlHF7RO9 I+G61a1/bl7e5y+GSlqYGsvXktwAe/OEIzPXaVXhbBpEwGZbjh83iyxg13/Ytjow 8qg/Jl2zL6vi0St6RB99DIABVps5QXXTyM7dOUUl1SJXXV6E3VibZC7pdDGxI7QX GTbW0Hn1Vuzt2yw/XTXM/IN++kMBEhPO -----END CERTIFICATE-----Generated at Sun Jun 2 21:14:32 2024 by rpki-client on console-ams.rpki-client.org